What is an IMSI and what can it tell me?¶

An IMSI is an identifier used by a mobile network to recognise a subscriber identity.

What this means¶

It is normally associated with the SIM or eSIM profile rather than with the physical handset.

This means an IMSI is not the same as a telephone number, an IMEI or a person’s name.

A network uses the IMSI behind the scenes when authenticating and providing service. Investigators may encounter it in provider records, specialist technical material or records linked to mobile-network activity.

Its main value is that it can help identify which subscription or network identity was active.

This can be useful in cases involving SIM changes, multiple devices, travel, covert use or attempts to separate a handset from a known telephone number.

It may be registered to one person and used by another. A business, family member or organisation may hold the subscription. The associated device may be shared, borrowed or stolen.

An IMSI should therefore be treated as a network identity that supports linkage, not as proof of personal responsibility.

The timing and source of the record also matter. Ask what system recorded the IMSI, what event caused it to be recorded and which handset, number or account was associated with it at that time.

The operational takeaway is: an IMSI identifies the mobile subscription to the network. Use it to track how that subscription interacted with devices and services, then corroborate separately who was actually using it.

What to check or do next¶

• If the same IMSI appears across different handset identifiers, that may indicate that the SIM or eSIM profile moved between devices.
• If different IMSIs appear against the same handset, that may indicate that the handset was used with multiple subscriptions.

Evidential limits¶

But an IMSI does not identify the human user.